cuelo 0.8.3 → 0.9.1

package/Tools/OMP_Global_Config/agent/rules/subagent.md

@@ -295,6 +295,21 @@ Task Guard lock·budget·소유권·`FINDING_ID`, exit status, 파일·권한·
 - 조각 간 인터페이스·시그니처·파일 소유권·출력 형식은 배치 `context`에 미리 확정한다.
 - 짧은 결정·변경분과 artifact 링크로 충분하면 전체 대화나 상류 보고서를 복사하지 않는다.
 
+### Skill 인계
+
+- Main은 자신이 읽고 활용한 Skill 중 맡길 조각과 관련된 것만 브리프에 인계한다. `skill://이름`과
+  필요한 절·문서 locator, 적용한 판단, 아직 불명확한 점을 짧게 적는다. 원문 전체나 설치된 Skill
+  목록을 복사하지 않는다.
+- 현재 규칙·작업에 따라 필수인 참조와 선택적인 참고를 구분한다. Maker는 필수 Skill을 관련
+  작업에 착수하기 전에 직접 읽는다. Main의 요약·원문을 읽었다는 설명은 Maker의 직접 참조를
+  대체하지 않는다. 같은 조각에서 이미 읽은 원문과 locator는 재사용한다.
+- 적용 방법이 헷갈리거나 Main의 요약과 현재 코드·규칙이 어긋나면 해당 Skill의 필요한 절을
+  다시 확인한다. “헷갈릴 때 참조”는 필수 선독을 생략하는 조건이 아니다. 원문을 확인해도
+  승인·보존 계약과 충돌하면 그 지점만 Main에게 근거와 함께 알리고 독립 작업은 계속한다.
+- Maker는 적용한 판단과 해당 변경·검증 근거를 기존 보고에 연결한다. Main은 그 근거로
+  적용 여부를 확인하며, 브리프에 이름을 적었다는 사실만으로 사용했다고 보고하지 않는다.
+  이 절은 새 자동 차단 gate나 관계없는 Skill까지 읽는 의무를 만들지 않는다.
+
 ## 병렬과 대기
 
 - `task.maxConcurrency`는 ceiling이다. ready인 진짜 독립 조각을 빈 슬롯까지 `tasks[]` feed로

package/Tools/OMP_Global_Config/agent/sop/_writer.md

@@ -59,6 +59,8 @@
 - Answer every finding that names your change with the fix you made and the raw output of the check
   that now covers it, keeping the same finding id — no separate messenger or new reporting stage.
   Never weaken an expectation, relax a fixture, or hide a failure to make validation pass.
+- Follow `rule://subagent` 「Skill 인계」 for relevant skills handed over in the brief:
+  required direct reading before implementation, reuse of known locators, and reconsultation when unclear.
 - 관련 Skill을 먼저 읽고 이번 조치에 적용되는 주의사항만 이름·절/locator·위험 요약으로 추린다.
   pre-retry advisory를 보충하다가(Common Rules) 검증 약화나 Skill 충돌·적용 불가가 나오면 문제 된
   조치만 보류하고 기존 blocker/조향 DM으로 원문 오류 locator·Skill locator·제안 조치·보존할 수용

package/Tools/OMP_Global_Config/patches/apply-core-patch.mjs

@@ -5967,6 +5967,87 @@ export class LearnTool implements AgentTool<LearnSchema> {`,
 	);
 `,
 	},
+	{
+		// 2026-10-04 한국어 회상 측정(.omp/memory-eval, 190문항, multilingual-e5-large): baseline hit@8 19.4%.
+		// 정답 원문 learn/retain 은 상위 8칸 1,520칸 중 79칸뿐이었고, 세 원인이 겹쳐 있었다. 하나만 고치면 다른
+		// 원인이 빈자리를 채워 효과가 없었고(13.9~26.7%), 셋을 함께 고치면 57.8%다(영어 fixture MRR 0.695→0.872).
+		// (1) FTS5 unicode61 은 어절을 통째로 토큰으로 삼아 `배포를`·`배포는` 이 서로 맞지 않는다(질의 어절 2,879개
+		// 중 정답 원문에 그대로 있는 것 521, 조사를 떼면 761). 한글로만 된 어절은 조사·어미를 뗀 어간을 어휘 그룹에
+		// 더하고 FTS 는 그 어간의 접두 질의로 찾는다. 사전 없이 끝 음절만 자르므로 어간은 늘 원 어절의 접두다.
+		file: "../pi-mnemopi/src/core/beam/recall.ts",
+		marker: "// HANSE: korean particle stem",
+		anchor: "const FLAT_FACT_SEARCH_NOISE: Record<string, true> = { entity: true, fact: true };\n",
+		patched: `const FLAT_FACT_SEARCH_NOISE: Record<string, true> = { entity: true, fact: true };
+
+// HANSE: korean particle stem
+const HANGUL_WORD = /^[\\uac00-\\ud7af]+$/;
+/** 긴 것부터 맞춘다. 떼고 남는 어간이 두 음절보다 짧으면 떼지 않는다. */
+const KOREAN_SUFFIXES = [
+	"에서는", "에서도", "으로는", "으로도", "에게서", "이라는", "이라고", "했는데", "됐는데", "하나요", "되나요", "인가요", "하려면", "입니다", "합니다",
+	"에서", "으로", "에게", "한테", "까지", "부터", "처럼", "보다", "마다", "라는", "라고", "에는", "로는", "이나", "이며", "이고", "하고", "해줘",
+	"해야", "하는", "했다", "하면", "해서", "하게", "하지", "되는", "된다", "인데", "이다", "인지",
+	"와", "과", "을", "를", "이", "가", "은", "는", "에", "의", "도", "만", "로", "나", "랑", "한", "할", "해", "된",
+];
+function koreanStem(token: string): string {
+	if (!HANGUL_WORD.test(token)) return token;
+	for (const suffix of KOREAN_SUFFIXES) {
+		if (token.endsWith(suffix) && token.length - suffix.length >= 2) return token.slice(0, -suffix.length);
+	}
+	return token;
+}
+`,
+	},
+	{
+		file: "../pi-mnemopi/src/core/beam/recall.ts",
+		marker: "if (stem !== token) seen.add(stem);",
+		anchor: "\t\tfor (const variant of recallSynonyms(token, useSynonyms)) {\n\t\t\tfor (const part of tokenize(variant)) seen.add(part);\n\t\t}\n\t\tif (seen.size > 0) groups.push([...seen]);\n",
+		patched: "\t\tfor (const variant of recallSynonyms(token, useSynonyms)) {\n\t\t\tfor (const part of tokenize(variant)) seen.add(part);\n\t\t}\n\t\tconst stem = koreanStem(token);\n\t\tif (stem !== token) seen.add(stem);\n\t\tif (seen.size > 0) groups.push([...seen]);\n",
+	},
+	{
+		file: "../pi-mnemopi/src/core/beam/recall.ts",
+		marker: "ftsPhrase(koreanStem(token))}*",
+		anchor: '\treturn tokens.map(ftsPhrase).join(" OR ");\n',
+		patched: '\treturn tokens.map(token => (koreanStem(token) === token ? ftsPhrase(token) : `${ftsPhrase(koreanStem(token))}*`)).join(" OR ");\n',
+	},
+	{
+		// (2) sleep 은 같은 출처의 working 행을 ` | ` 로 이어 aaak 로 줄인 에피소드를 만든다(CUELO 평균 11,180자, 최대
+		// 99,932자). 원본 행은 consolidated_at 만 찍히고 남아 그 자체로 후보다. 그래서 에피소드는 사본인데, 병합 문서의
+		// 임베딩이 여러 질의에 두루 가깝고 episodic 점수가 dense 를 working(0.2)보다 크게(0.5) 쳐서 상위 8칸 중
+		// 718칸을 차지했다. 원본이 모두 살아 있는(지워지거나 superseded 되지 않은) 에피소드만 후보에서 뺀다.
+		// 원본이 하나라도 없으면 그 에피소드가 유일한 사본이므로 지금처럼 남긴다. 30일·180일 열화로 에피소드
+		// 뒤쪽 교훈이 잘리는 손실(226개 중 127·155개)도 원본이 남은 에피소드에는 회상 손실이 되지 않는다.
+		file: "../pi-mnemopi/src/core/beam/recall.ts",
+		marker: "// HANSE: skip sleep episodes whose sources are live",
+		anchor: "\tif (candidates.length === 0) return candidates;\n\tvoid useSynonyms;\n\treturn candidates;\n",
+		patched: `	if (candidates.length === 0) return candidates;
+	void useSynonyms;
+	// HANSE: skip sleep episodes whose sources are live
+	return candidates.filter(candidate => {
+		if (candidate.tierLabel !== "episodic" || asString(candidate.row.source) !== "sleep_consolidation") return true;
+		const ids = asString(candidate.row.summary_of)
+			.split(",")
+			.map(id => id.trim())
+			.filter(id => id.length > 0);
+		if (ids.length === 0) return true;
+		const live = queryGet(
+			beam,
+			\`SELECT COUNT(*) AS n FROM working_memory WHERE id IN (\${placeholders(ids.length)}) AND superseded_by IS NULL\`,
+			ids,
+		);
+		return asNumber(live?.n) !== ids.length;
+	});
+`,
+	},
+	{
+		// (3) learn/retain 은 의도적 기록인데 veracity "tool" 로 저장되고(learn.ts·memory-retain.ts) 회상 가중이 0.5 라,
+		// "unknown"(0.8)인 자동 transcript 아래로 밀렸다(정답 원문 fts=1 이어도 순위 25위). omp 에서 "tool" 을 쓰는
+		// 곳은 이 둘뿐이다. 회상 점수의 가중만 1.0 으로 올린다. 저장 데이터와 veracity-consolidation 가중은 그대로다.
+		// config.ts 의 MNEMOPI_TOOL_WEIGHT(toolWeight)는 어디서도 읽지 않아 이 경로를 바꾸지 못한다.
+		file: "../pi-mnemopi/src/core/beam/recall.ts",
+		marker: "// HANSE: deliberate learn/retain weight",
+		anchor: "\ttool: 0.5,\n\tfalse: 0,\n",
+		patched: "\t// HANSE: deliberate learn/retain weight\n\ttool: 1.0,\n\tfalse: 0,\n",
+	},
 	{
 		// 2026-09-29 실측: 기억 임베딩 재구축(모델 변경·중단 뒤 재개)이 128건 묶음을 한꺼번에 worker 에
 		// 올렸다. worker 는 요청을 하나씩 처리하는데 요청마다 120초 타이머가 보낸 순간부터 흘러,
@@ -8810,6 +8891,12 @@ function parentSubagentServiceTiers(
 			marker: 'if(!i.endsWith(".jsonl")||i.includes(".bak")||ERe(i))continue;let a=i.slice(0,-6),',
 			anchor: 'if(!i.endsWith(".jsonl")||i.includes(".bak")||ERe(i))continue;let a=i.slice(0,-6),',
 			patched: 'if(!i.endsWith(".jsonl")||i.includes(".bak")||ERe(i))continue;let a=i.slice(0,-6),',
+		}, {
+			// 18.6.0 번들의 같은 upstream 조건(_Re = isAdvisorTranscriptName) no-op. 이름만 바뀌었다.
+			file: "dist/cli.js",
+			marker: 'if(!i.endsWith(".jsonl")||i.includes(".bak")||_Re(i))continue;let a=i.slice(0,-6),',
+			anchor: 'if(!i.endsWith(".jsonl")||i.includes(".bak")||_Re(i))continue;let a=i.slice(0,-6),',
+			patched: 'if(!i.endsWith(".jsonl")||i.includes(".bak")||_Re(i))continue;let a=i.slice(0,-6),',
 		}],
 	},
 	// 18.4.5 는 /ratchet 을 새로 넣으면서 `src/ratchet/prelude.ts`(코드)와 `prelude.js`(eval 텍스트 자산)를 같은 stem 으로
@@ -9341,6 +9428,215 @@ class HarmonyLeakInterruption extends Error {`,
 		anchor: "\t\tconst attribution = options?.attribution ?? \"user\";\n",
 		patched: "\t\tconst attribution = options?.attribution ?? \"user\";\n\t\tif (mode !== \"aside\") this.#raiseAutoThinkingForQueuedInput(text, attribution);\n",
 	},
+	// CUELO 계정 자리(2026-10-04). upstream oauth.accounts()의 position은 활성 credential 배열 index라서,
+	// 한 계정이 인증 실패로 비활성화되면 뒤 계정이 앞 자리로 당겨진다(RIN 자리 0이 비면 MIO 계정이 RIN이 된다).
+	// 재로그인도 새 행을 만들고 tombstone을 지우므로 [11, 12]처럼 순서가 뒤집힌다. 자리 = (활성 OAuth id ∪
+	// 인증 실패로 자리를 지키는 tombstone id) 오름차순 index로 바꾸고, 같은 identity의 재로그인은 그
+	// tombstone 행을 같은 id로 되살린다. 로그아웃(deleted by user)·교체(replaced by)는 자리를 반납한다.
+	// accounts()는 계속 활성 계정만 돌려주므로 position과 배열 index가 다를 수 있다.
+	{
+		file: "../pi-ai/src/auth/sqlite-credential-store.ts",
+		marker: "function holdsOAuthSeat(row: AuthRow): boolean {",
+		anchor: "\nfunction matchesReplacementCredential(\n",
+		patched: `
+/**
+ * CUELO: a tombstone that keeps its account seat (\`oauth.accounts\` position) — an OAuth row
+ * disabled by an auth failure. Replacement and logout tombstones give their seat up.
+ */
+function holdsOAuthSeat(row: AuthRow): boolean {
+	return (
+		row.credential_type !== "api_key" &&
+		row.disabled_cause !== null &&
+		!/^(replaced by|deleted by user)/i.test(row.disabled_cause)
+	);
+}
+
+function matchesReplacementCredential(
+`,
+	},
+	{
+		file: "../pi-ai/src/auth/sqlite-credential-store.ts",
+		marker: "\t\t\t// CUELO: an auth-failed account that logs in again revives its own tombstone in place",
+		anchor: "\t\t\t\tthis.#deleteStmt.run(\"replaced by newer credential\", row.id);\n\t\t\t}\n\n\t\t\tif (targetId === null) {\n\t\t\t\tconst row = this.#insertStmt.get(\n",
+		patched: `\t\t\t\tthis.#deleteStmt.run("replaced by newer credential", row.id);
+\t\t\t}
+
+\t\t\t// CUELO: an auth-failed account that logs in again revives its own tombstone in place
+\t\t\t// instead of getting a new row, so its credential id, account seat and the session pins
+\t\t\t// that name it survive re-authentication. Upstream's replacement matcher decides identity:
+\t\t\t// another member of the same org never claims the row. Blocks on the id stay as they were.
+\t\t\tif (targetId === null && item.type === "oauth") {
+\t\t\t\tfor (const row of this.#listDisabledByProviderStmt.all(providerName) as AuthRow[]) {
+\t\t\t\t\tif (!holdsOAuthSeat(row)) continue;
+\t\t\t\t\tconst identityKey = resolveRowCredentialIdentityKey(providerName, row);
+\t\t\t\t\tif (!matchesReplacementCredential(providerName, deserializeCredential(row), identityKey, item)) continue;
+\t\t\t\t\tconst revived = this.#db
+\t\t\t\t\t\t.query(
+\t\t\t\t\t\t\t\`UPDATE auth_credentials SET credential_type = ?, data = ?, identity_key = ?, disabled_cause = NULL, updated_at = \${SQLITE_NOW_EPOCH} WHERE id = ? AND disabled_cause IS NOT NULL\`,
+\t\t\t\t\t\t)
+\t\t\t\t\t\t.run(serialized.credentialType, serialized.data, serialized.identityKey, row.id) as { changes: number };
+\t\t\t\t\tif (revived.changes > 0) {
+\t\t\t\t\t\ttargetId = row.id;
+\t\t\t\t\t\tbreak;
+\t\t\t\t\t}
+\t\t\t\t}
+\t\t\t}
+
+\t\t\tif (targetId === null) {
+\t\t\t\tconst row = this.#insertStmt.get(
+`,
+	},
+	{
+		file: "../pi-ai/src/auth/sqlite-credential-store.ts",
+		marker: "\tlistOAuthSeatHolderIds(provider: string): number[] {",
+		anchor: "\tasync listDisabledCredentials(provider?: string): Promise<DisabledCredentialSummary[]> {\n",
+		patched: `\t/**
+\t * CUELO: ids of \`provider\` tombstones that keep their account seat — auth failures whose
+\t * identity no active row has taken over (the superseded-tombstone purge's own rule).
+\t */
+\tlistOAuthSeatHolderIds(provider: string): number[] {
+\t\tconst active: AuthCredential[] = [];
+\t\tfor (const row of this.#listActiveByProviderStmt.all(provider) as AuthRow[]) {
+\t\t\tconst credential = deserializeCredential(row);
+\t\t\tif (credential?.type === "oauth") active.push(credential);
+\t\t}
+\t\tconst ids: number[] = [];
+\t\tfor (const row of this.#listDisabledByProviderStmt.all(provider) as AuthRow[]) {
+\t\t\tif (!holdsOAuthSeat(row)) continue;
+\t\t\tconst credential = deserializeCredential(row);
+\t\t\tif (credential === null) continue;
+\t\t\tconst identityKey = resolveRowCredentialIdentityKey(provider, row);
+\t\t\tif (active.some(current => matchesReplacementCredential(provider, credential, identityKey, current))) continue;
+\t\t\tids.push(row.id);
+\t\t}
+\t\treturn ids;
+\t}
+
+\tasync listDisabledCredentials(provider?: string): Promise<DisabledCredentialSummary[]> {
+`,
+	},
+	{
+		file: "../pi-ai/src/auth/store.ts",
+		marker: "\tlistOAuthSeatHolderIds?(provider: string): number[];",
+		anchor: "\tlistDisabledCredentials?(provider?: string, signal?: AbortSignal): Promise<DisabledCredentialSummary[]>;\n",
+		patched: "\tlistDisabledCredentials?(provider?: string, signal?: AbortSignal): Promise<DisabledCredentialSummary[]>;\n\t/** CUELO: ids of tombstones that keep their account seat. Local stores only; others keep upstream's compacted order. */\n\tlistOAuthSeatHolderIds?(provider: string): number[];\n",
+	},
+	{
+		file: "../pi-ai/src/auth/pool.ts",
+		marker: "\toauthSeatIds(provider: string): number[] {",
+		anchor: "\t/**\n\t * Disabled credential tombstones for display surfaces (`omp usage`,\n\t * broker `GET /v1/credentials/disabled`). Empty when the backing store\n\t * keeps no tombstones or the remote broker predates the endpoint.\n\t */\n\tasync listDisabled(",
+		patched: `\t/**
+\t * CUELO: the account seats of \`provider\` — active OAuth rows plus tombstones that keep their
+\t * seat, by id. \`oauth.accounts\` reports an account's index here as its \`position\`, so an
+\t * auth-failed account leaves its seat empty instead of shifting every later account.
+\t */
+\toauthSeatIds(provider: string): number[] {
+\t\tconst ids = new Set<number>();
+\t\tfor (const entry of this.entries(provider)) if (entry.credential.type === "oauth") ids.add(entry.id);
+\t\tfor (const id of this.#store.listOAuthSeatHolderIds?.(provider) ?? []) ids.add(id);
+\t\treturn [...ids].sort((a, b) => a - b);
+\t}
+
+\t/**
+\t * Disabled credential tombstones for display surfaces (\`omp usage\`,
+\t * broker \`GET /v1/credentials/disabled\`). Empty when the backing store
+\t * keeps no tombstones or the remote broker predates the endpoint.
+\t */
+\tasync listDisabled(`,
+	},
+	{
+		file: "../pi-ai/src/auth/types.ts",
+		marker: "\toauthSeatIds(provider: string): number[];",
+		anchor: "\tlistDisabled(provider?: string, signal?: AbortSignal): Promise<DisabledCredentialSummary[]>;\n",
+		patched: "\tlistDisabled(provider?: string, signal?: AbortSignal): Promise<DisabledCredentialSummary[]>;\n\t/** CUELO: account seats by id — active OAuth rows plus auth-failed tombstones awaiting re-login. A seat's index is `OAuthAccountSummary.position`. */\n\toauthSeatIds(provider: string): number[];\n",
+	},
+	{
+		file: "../pi-ai/src/auth/types.ts",
+		marker: " * Returned by {@link AuthStorage.oauth.accounts}; `position` (0-based) is the\n * account seat.",
+		anchor: " * Returned by {@link AuthStorage.oauth.accounts}; `position` (0-based) is the\n * selector accepted by {@link AuthStorage.oauth.accessById}.\n",
+		patched: " * Returned by {@link AuthStorage.oauth.accounts}; `position` (0-based) is the\n * account seat. CUELO: an auth-failed account keeps its seat until it logs in again, so\n * positions can have gaps — select by `position` or `credentialId`, never by array index.\n",
+	},
+	{
+		file: "../pi-ai/src/auth/types.ts",
+		marker: "\t * order, WITHOUT refreshing any token. Each account's `position` (0-based) is its\n\t * account seat",
+		anchor: "\t * order, WITHOUT refreshing any token. The array position (0-based) is the\n\t * selector accepted by {@link AuthStorage.oauth.accessById}; a \"pick the Nth\n\t * account\" UI should render `position + 1`.\n",
+		patched: "\t * order, WITHOUT refreshing any token. Each account's `position` (0-based) is its\n\t * account seat; a \"pick the Nth account\" UI should render `position + 1`. CUELO: an\n\t * auth-failed account keeps its seat empty, so positions can have gaps.\n",
+	},
+	{
+		file: "../pi-ai/src/auth/oauth.ts",
+		marker: "\t * order, WITHOUT refreshing any token. Each account's `position` (0-based) is its\n\t * account seat",
+		anchor: "\t * order, WITHOUT refreshing any token. The array position (0-based) is the\n\t * selector displayed by a \"pick the Nth account\" UI as `position + 1`.\n",
+		patched: "\t * order, WITHOUT refreshing any token. Each account's `position` (0-based) is its\n\t * account seat, displayed by a \"pick the Nth account\" UI as `position + 1`. CUELO: an\n\t * auth-failed account keeps its seat empty, so positions can have gaps.\n",
+	},
+	{
+		file: "../pi-ai/src/auth/oauth.ts",
+		marker: "\t\tconst seats = this.#deps.pool.oauthSeatIds(provider);",
+		anchor: "\t\treturn this.#getStoredOAuthSelections(provider).map((selection, position) => {\n\t\t\tconst active = selection.credentialId === activeCredentialId;\n\t\t\treturn {\n\t\t\t\tposition,\n",
+		patched: `\t\t// CUELO: \`position\` is the account seat (CredentialPool.oauthSeatIds), not the index in this
+\t\t// active-only list, so a later account is never renumbered into an auth-failed account's seat.
+\t\tconst seats = this.#deps.pool.oauthSeatIds(provider);
+\t\treturn this.#getStoredOAuthSelections(provider).map(selection => {
+\t\t\tconst active = selection.credentialId === activeCredentialId;
+\t\t\treturn {
+\t\t\t\tposition: seats.indexOf(selection.credentialId),
+`,
+	},
+	{
+		// 같은 org의 다른 사람 tombstone을 활성 계정이 숨기던 판정. upstream 주석("neither email nor
+		// accountId contradicts")대로 email·accountId가 다르면 org가 같아도 다른 identity다.
+		file: "src/cli/usage-cli.ts",
+		marker: "\t\tif (summaryEmail && accountEmail) return summaryEmail === accountEmail;",
+		anchor: "\t\tif (summaryEmail && accountEmail && summaryEmail === accountEmail) return true;\n\t\tif (summaryAccountId && accountAccountId && summaryAccountId === accountAccountId) return true;\n",
+		patched: "\t\t// CUELO: a differing email or accountId is another person even inside one org (or a shared\n\t\t// Codex workspace id), so that member's auth failure stays visible.\n\t\tif (summaryEmail && accountEmail) return summaryEmail === accountEmail;\n\t\tif (summaryAccountId && accountAccountId) return summaryAccountId === accountAccountId;\n",
+	},
+	{
+		// --list 가 position + 1 로 번호를 보여 주므로 --account 도 같은 번호(자리)로 고른다.
+		file: "src/commands/token.ts",
+		marker: "\t\t\t\tconst selected = n === undefined ? undefined : accounts.find(acct => acct.position === n - 1);",
+		anchor: `\t\t\t\tconst n = flags.account;
+\t\t\t\tif (n === undefined || n < 1 || n > accounts.length) {
+\t\t\t\t\tprocess.stderr.write(
+\t\t\t\t\t\t\`\${chalk.red(\`Invalid --account \${n ?? "(missing)"}.\`)} Provider "\${providerName}" has \${accounts.length} OAuth account(s) (1-\${accounts.length}).\\n\`,
+\t\t\t\t\t);
+\t\t\t\t\tprocess.exitCode = 1;
+\t\t\t\t\treturn;
+\t\t\t\t}
+\t\t\t\tconst resolution = managedMcpOAuth
+\t\t\t\t\t? await resolveManagedMcpOAuthToken(authStorage, provider, {
+\t\t\t\t\t\t\tcredentialId: accounts[n - 1]?.credentialId,
+\t\t\t\t\t\t\tforceRefresh: flags["force-refresh"],
+\t\t\t\t\t\t})
+\t\t\t\t\t: await authStorage.oauth.accessById(provider, accounts[n - 1]!.credentialId, {
+`,
+		patched: `\t\t\t\tconst n = flags.account;
+\t\t\t\t// CUELO: account numbers are seats (\`position + 1\`, as --list prints them); an auth-failed
+\t\t\t\t// account leaves its number empty instead of shifting the others.
+\t\t\t\tconst selected = n === undefined ? undefined : accounts.find(acct => acct.position === n - 1);
+\t\t\t\tif (n === undefined || selected === undefined) {
+\t\t\t\t\tprocess.stderr.write(
+\t\t\t\t\t\t\`\${chalk.red(\`Invalid --account \${n ?? "(missing)"}.\`)} Provider "\${providerName}" has OAuth account(s) \${accounts.map(acct => acct.position + 1).join(", ")}.\\n\`,
+\t\t\t\t\t);
+\t\t\t\t\tprocess.exitCode = 1;
+\t\t\t\t\treturn;
+\t\t\t\t}
+\t\t\t\tconst resolution = managedMcpOAuth
+\t\t\t\t\t? await resolveManagedMcpOAuthToken(authStorage, provider, {
+\t\t\t\t\t\t\tcredentialId: selected.credentialId,
+\t\t\t\t\t\t\tforceRefresh: flags["force-refresh"],
+\t\t\t\t\t\t})
+\t\t\t\t\t: await authStorage.oauth.accessById(provider, selected.credentialId, {
+`,
+	},
+	{
+		// 첫 줄이 read 예산보다 크면 hashline 모드는 그 줄을 한 바이트도 내지 않고 거부 문구만 낸다. 그런데
+		// upstream은 preview 크기를 전달량으로 보고해 "[Showing line 1 (partial, 150.0KB of 195.3KB)]"처럼
+		// 모델이 받은 적 없는 150KB를 받았다고 말한다(2026-10-04 실측). 전달량은 본문에 실제로 실린 것만 센다.
+		// :raw·hashline을 끈 모드의 preview, 재개 offset 미제공, 수집 예산은 그대로다.
+		file: "src/tools/read.ts",
+		marker: "\t\t\t\t\t// CUELO: hashline mode refuses the oversized line outright",
+		anchor: "\t\t\t\t\tconst previewBytes = firstLineExceedsLimit ? (firstLinePreview?.bytes ?? 0) : 0;\n",
+		patched: "\t\t\t\t\t// CUELO: hashline mode refuses the oversized line outright and delivers none of it, so its\n\t\t\t\t\t// notice must report 0 bytes shown, not the preview it never rendered.\n\t\t\t\t\tconst previewBytes =\n\t\t\t\t\t\tfirstLineExceedsLimit && (rawSelector || !displayMode.hashLines) ? (firstLinePreview?.bytes ?? 0) : 0;\n",
+	},
 ];
 // EDITS 문자열의 줄 끝을 LF로 통일한다. 이 파일의 작업 사본이 CRLF여도 core 파일(LF)과
 // 비교·치환이 어긋나지 않는다. core 파일 자체의 줄 끝은 건드리지 않는다.

package/next.config.ts

@@ -38,6 +38,7 @@ const nextConfig: NextConfig = {
   outputFileTracingRoot: __dirname,
   serverExternalPackages: [
     "unpdf",
+    "ffmpeg-static",
     "@oh-my-pi/pi-coding-agent",
     "@oh-my-pi/pi-agent-core",
     "@oh-my-pi/pi-ai",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cuelo",
-  "version": "0.8.3",
+  "version": "0.9.1",
   "description": "CUELO — open-source AI coding agent workspace and harness for omp (oh-my-pi)",
   "homepage": "https://github.com/gim47656-ship-it/CUELO#readme",
   "repository": {
@@ -30,7 +30,7 @@
   "license": "MIT",
   "cueloBuild": {
     "distribution": "cuelo",
-    "coreVersion": "18.5.1"
+    "coreVersion": "18.6.0"
   },
   "engines": {
     "node": ">=22.19.0",
@@ -88,14 +88,16 @@
     "test:coverage": "bun test --coverage ./app ./components ./hooks ./lib ./public ./bin ./install.test.mjs"
   },
   "dependencies": {
-    "@oh-my-pi/pi-agent-core": "18.5.1",
-    "@oh-my-pi/pi-ai": "18.5.1",
-    "@oh-my-pi/pi-coding-agent": "18.5.1",
-    "@oh-my-pi/pi-tui": "18.5.1",
-    "@oh-my-pi/pi-utils": "18.5.1",
+    "@oh-my-pi/pi-agent-core": "18.6.0",
+    "@oh-my-pi/pi-ai": "18.6.0",
+    "@oh-my-pi/pi-coding-agent": "18.6.0",
+    "@oh-my-pi/pi-tui": "18.6.0",
+    "@oh-my-pi/pi-utils": "18.6.0",
     "@seed-design/css": "2.8.0",
     "@seed-design/react": "2.4.1",
     "@seed-design/tailwind4-theme": "2.4.0",
+    "busboy": "1.6.0",
+    "ffmpeg-static": "5.3.0",
     "js-yaml": "^5.4.1",
     "next": "16.2.12",
     "react": "^19.2.8",
@@ -113,6 +115,7 @@
     "@react-three/fiber": "^9.8.1",
     "@tailwindcss/postcss": "^4.3.3",
     "@types/bun": "^1.4.0",
+    "@types/busboy": "1.5.4",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^25.9.5",
     "@types/react": "^19.2.18",

package/.next/static/A6e8vaM_XsMnaMJbdHUo9/_buildManifest.js

@@ -1 +0,0 @@
-self.__BUILD_MANIFEST={__rewrites:{afterFiles:[],beforeFiles:[],fallback:[]},__routerFilterStatic:{numItems:61,errorRate:1e-4,numBits:1170,numHashes:14,bitArray:[1,1,0,0,1,0,0,1,1,0,0,0,0,0,1,1,1,0,1,1,1,0,0,0,1,0,0,0,0,1,1,0,0,0,0,1,1,1,0,1,1,1,1,1,0,0,0,0,0,1,0,0,0,0,1,1,1,0,1,1,1,1,1,1,1,0,1,1,0,1,0,0,1,0,0,1,1,1,1,1,1,1,0,1,0,1,1,1,1,1,1,1,1,1,0,1,0,0,1,1,1,0,1,0,1,0,1,0,1,0,0,0,1,1,0,0,0,1,1,0,1,0,0,0,1,1,0,0,1,1,0,0,0,1,0,0,0,0,0,1,1,1,1,0,0,0,0,0,1,0,1,1,0,1,0,0,0,0,0,1,0,1,0,1,1,0,1,0,1,1,0,0,0,1,0,0,1,0,0,0,0,0,1,1,0,1,1,1,1,1,0,0,0,0,1,1,1,0,0,1,1,1,0,1,0,1,1,1,0,0,0,0,0,1,1,0,1,1,0,1,0,1,1,0,0,0,1,1,0,1,0,0,0,1,0,1,1,0,1,1,1,0,1,0,1,0,0,0,1,0,1,0,1,1,1,1,1,0,1,1,0,0,0,1,1,0,1,0,1,0,1,0,0,0,1,0,0,0,0,1,0,1,1,0,0,1,0,0,1,0,1,1,0,0,1,0,1,0,1,1,1,0,1,0,1,0,1,0,1,0,0,1,1,0,0,1,0,0,0,1,0,1,1,0,1,1,0,1,1,0,1,0,1,1,1,1,0,1,0,1,1,0,1,0,0,0,1,1,0,1,1,1,0,0,0,0,0,1,1,0,1,0,1,0,1,1,1,1,0,1,1,1,0,1,1,0,0,1,1,0,1,1,1,0,0,0,0,0,1,1,1,0,1,1,1,1,1,0,1,1,0,0,0,1,1,1,0,0,0,0,1,0,0,1,1,0,1,1,1,0,0,0,1,0,0,0,0,0,0,1,1,1,1,1,1,1,1,0,1,1,1,0,1,1,0,1,1,1,0,0,1,1,0,1,0,1,0,1,1,1,1,1,0,1,1,0,0,0,1,1,1,0,1,1,1,1,0,1,1,1,0,0,1,0,0,1,0,0,1,0,1,1,0,0,1,1,0,0,0,1,1,0,0,1,0,1,1,0,0,1,0,1,0,0,1,0,0,1,0,0,1,0,1,0,1,0,1,1,0,1,0,1,0,0,1,0,0,0,0,0,0,0,0,1,0,1,1,0,1,0,1,1,1,0,0,0,1,1,0,0,1,1,0,1,1,1,0,0,0,0,1,0,1,0,1,1,1,0,1,1,1,1,0,0,1,0,1,1,0,0,1,0,1,0,0,0,1,1,1,0,0,0,0,1,1,1,0,1,1,0,0,0,1,0,1,1,0,0,0,1,1,1,0,1,1,1,1,1,0,0,0,0,1,1,1,0,1,1,1,1,0,1,1,1,0,1,0,0,0,0,0,1,1,1,0,0,0,0,1,0,1,1,1,1,0,1,1,0,1,0,0,0,0,0,0,1,1,1,1,0,1,0,0,1,0,0,1,0,1,1,0,0,1,0,1,0,1,1,0,0,1,0,1,1,0,0,0,1,1,1,0,1,1,0,1,1,0,1,0,1,0,0,0,0,1,0,0,0,1,0,0,0,0,1,0,1,0,1,0,0,1,1,1,1,0,1,1,1,1,1,1,1,0,0,0,0,0,1,0,0,0,0,1,1,0,0,1,1,1,1,1,0,1,0,1,1,0,1,1,0,0,1,1,0,0,1,0,1,1,0,1,0,0,1,0,0,0,0,1,0,0,1,0,1,0,1,1,0,1,1,1,1,0,0,1,1,1,1,1,1,1,0,1,1,0,0,1,0,0,0,0,0,0,1,1,0,1,1,1,0,1,0,1,0,0,1,1,0,1,0,1,1,0,0,1,0,1,1,0,1,0,1,1,1,1,0,1,0,1,1,0,0,1,1,1,0,1,1,1,1,1,0,1,1,1,0,1,0,0,1,1,1,0,1,0,1,1,0,1,0,0,0,1,1,1,1,0,0,1,1,1,1,0,1,1,0,0,0,0,1,1,1,0,1,1,1,1,1,1,1,0,0,1,0,0,1,0,1,1,0,1,1,1,0,0,0,0,0,1,0,0,1,1,1,1,0,0,0,1,0,1,1,0,0,0,1,0,1,0,1,0,1,1,1,1,1,1,1,1,0,0,0,1,0,0,1,0,1,1,0,1,0,0,0,0,0,1,1,0,0,0,0,0,0,0,1,0,0,1,1,1,0,0,0,0,0,0,0,0,0,0,0,1,0,1,1,1,0,0,1,0,0,0,1,1,0,1,1,0,0,0,0,1,0,0,1,0,0,1,0,0,0,1,1,0,0,0,1,0,0,0,0,1,0,0,1,1,0,0,0,0,0,1,0,0,1,0,1,1,1,1,0,0,0,1,0,0,0,0,1,1,0,0,0,0,0,0,1,1,1,0,1,0,1,0,1,1,1,0,1,0,0,1,1,1,0,1,1,0,0,0,1,0,0,1,1,1,0,0,1,0,0,0,1,1,0,1,0,0,1,1,1,0,1,1,0,1,1,1,0,0,0,1,0,0,0,0,0,1,0,1,0,1,0,1,0,0,0,1,0]},__routerFilterDynamic:{numItems:10,errorRate:1e-4,numBits:192,numHashes:14,bitArray:[1,1,0,0,1,0,1,1,1,1,1,0,1,1,0,1,1,1,1,1,0,1,1,1,0,1,0,1,0,1,0,0,0,0,1,1,0,1,1,0,0,0,1,0,0,0,0,1,1,0,1,1,1,1,1,1,0,1,0,0,1,1,1,0,1,1,1,1,1,1,0,0,1,0,0,0,0,0,0,0,1,0,1,0,1,0,0,1,1,1,1,0,0,0,1,1,0,0,1,1,0,1,0,1,0,0,0,1,0,0,0,1,0,1,1,1,0,1,1,0,1,0,0,0,0,0,0,1,0,1,1,0,0,0,1,0,0,1,1,1,0,0,1,1,1,1,1,0,1,1,0,0,1,1,0,0,1,0,0,1,0,0,1,1,1,1,1,0,1,1,1,1,0,0,1,0,0,0,0,1,1,1,1,1,1,0,1,1,1,0,1,1]},sortedPages:["/_app"]},self.__BUILD_MANIFEST_CB&&self.__BUILD_MANIFEST_CB();